Which of the following is a common method for protecting data at rest in a Zero Trust environment?

Using TLS for all network communications

Applying full-disk encryption to storage devices

Using multi-factor authentication for user logins

Implementing a firewall to block external access

A company wants to ensure that data-centric policies are enforced consistently across all environments, including on-premises, cloud, and SaaS. They have a complex environment with multiple data stores. Which approach provides the most consistent enforcement?

Implement separate security solutions for each environment.

Use a third-party DLP solution that covers all environments.

Migrate all data to a single cloud provider to simplify policy enforcement.

Use a centralized information protection platform, such as Microsoft Purview, to define and manage sensitivity labels and policies that apply across all environments.

Which of the following is an example of a data access anomaly that monitoring might detect?

A user accessing data from a known corporate device

A user accessing data from the same location as usual

A user accessing a large volume of data at an unusual time

A user accessing data during normal business hours

A financial services firm is moving sensitive customer data to Azure Blob Storage. They require that data be encrypted both at rest and in transit, and that encryption keys be managed by their own hardware security module (HSM) for compliance. Which configuration should they use?

Implement Azure Disk Encryption for the storage account and use a VPN gateway for all data transfers.

Enable Azure Storage Service Encryption with Microsoft-managed keys and enforce HTTPS for all API calls.

Use customer-managed keys stored in Azure Key Vault with the 'Soft Delete' and 'Purge Protection' features enabled.

Configure Azure Storage to use customer-provided keys (SSE-C) and require HTTPS for data transfer.

In a data-centric Zero Trust strategy, what is the primary purpose of applying classification labels to data?

To automatically delete data after a set period

To enable consistent enforcement of security policies based on data sensitivity

To ensure data is stored only on-premises

To replace the need for encryption on sensitive data

Dell Zero Trust Design

Domain 5Objective 2

Apply Data Centric Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 3)

Part of the Data Centric Zero Trust domain, which accounts for 10% of the ZERO-TRUST-DESIGN exam.

28questions here

6free pages

7concepts

10%of the exam

Questions 11–15

11foundation · easy
Which of the following is a common method for protecting data at rest in a Zero Trust environment?
Select an answer first
12expert · hard
A company wants to ensure that data-centric policies are enforced consistently across all environments, including on-premises, cloud, and SaaS. They have a complex environment with multiple data stores. Which approach provides the most consistent enforcement?
Select an answer first
13foundation · easy
Which of the following is an example of a data access anomaly that monitoring might detect?
Select an answer first
14application · medium
A financial services firm is moving sensitive customer data to Azure Blob Storage. They require that data be encrypted both at rest and in transit, and that encryption keys be managed by their own hardware security module (HSM) for compliance. Which configuration should they use?
Select an answer first
15foundation · easy
In a data-centric Zero Trust strategy, what is the primary purpose of applying classification labels to data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.